Avalanche

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-07	CVE-2021-42131	SQL Injection vulnerability in Ivanti Avalanche A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation. network low complexity ivanti CWE-89	8.8
2021-12-07	CVE-2021-42132	Command Injection vulnerability in Ivanti Avalanche A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution. network low complexity ivanti CWE-77	8.8
2021-12-07	CVE-2021-42133	Inclusion of Functionality from Untrusted Control Sphere vulnerability in Ivanti Avalanche An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write. network low complexity ivanti CWE-829	8.1
2020-04-28	CVE-2020-12442	SQL Injection vulnerability in Ivanti Avalanche 6.3 Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250. network low complexity ivanti CWE-89 critical	9.8
2018-06-29	CVE-2018-8902	Improper Authentication vulnerability in Ivanti Avalanche An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. network low complexity ivanti CWE-287	6.5
2018-06-29	CVE-2018-8901	Unspecified vulnerability in Ivanti Avalanche An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. local low complexity ivanti	7.8